General
- Target 2026-07-05_5ac3211ccedaf67f52cdc1baba2cd18a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.6MB
- Sample260705-rprljscy8z
- SHA256 b5606a91e598d011c78a44d88803269c8dbb490956a7b6b6a623e2a59a4d6c6c
- MD5 5ac3211ccedaf67f52cdc1baba2cd18a
- SHA1 112480d682c09120929244f553197cd5546f8bf4
- SHA512 0b7f70b1bd0417566fe12fe47397f88c644e75e5b962739c918144a7c64ccafccbb6cf085e53ca3cd82a015ff47b61187f678a0f315de13cc87826feb1c0069b
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjx9EaBfJ8MD5TvinrmAYTqMi8CtBd2QHCHmTBW5:A3kMPljb56r+qJtb2I
- TLSH T13C855B22F6648B75D07BC075C6E29656EA333C414F308BCB53949E693E336D19A3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-05_5ac3211ccedaf67f52cdc1baba2cd18a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_5ac3211ccedaf67f52cdc1baba2cd18a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_5ac3211ccedaf67f52cdc1baba2cd18a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.6MB
- SHA256 b5606a91e598d011c78a44d88803269c8dbb490956a7b6b6a623e2a59a4d6c6c
- MD5 5ac3211ccedaf67f52cdc1baba2cd18a
- SHA1 112480d682c09120929244f553197cd5546f8bf4
- SHA512 0b7f70b1bd0417566fe12fe47397f88c644e75e5b962739c918144a7c64ccafccbb6cf085e53ca3cd82a015ff47b61187f678a0f315de13cc87826feb1c0069b
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjx9EaBfJ8MD5TvinrmAYTqMi8CtBd2QHCHmTBW5:A3kMPljb56r+qJtb2I
- TLSH T13C855B22F6648B75D07BC075C6E29656EA333C414F308BCB53949E693E336D19A3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory